authorization config-commands - doubts

Guilherme Gianotto Bratfisch · ‎09-16-2014

Hello Everyone,

So, for AAA Authorization,

When I issue : aaa authorization commands 15 default local. -> It will authorize every command on the exec for lvl 15.

The command above will overlap the: aaa authorization config-commands. ?!

I should use : aaa authorization config-commands. Just when i'm trying to authorize configuration commands ?!

nspasov · ‎09-16-2014

No, the aaa authorization config-commands is a must for the aaa authorization commands 15 default local to work. If the config-commands is missing from your config then no authorization will happen for level 15 commands. Take a look at this post:

https://supportforums.cisco.com/discussion/11409121/command-confusion-aaa-authorization-config-commands

Thank you for rating helpful posts!